This vulnerability affects Tibco Administrator up to version 5.13.0 and involves injection through the web-based administration console by an authenticated user. The CVSS 4.0 vector indicates network attack vector with low attack complexity and no user interaction required, but privileges are required. The impact includes high confidentiality, integrity, and availability impacts, with low scope and impact on system integrity and availability. No known exploits in the wild have been reported.

An authenticated user can exploit this injection vulnerability to potentially compromise confidentiality, integrity, and availability of the Tibco Administrator system. This could lead to unauthorized actions or data manipulation within the administration console environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or vendor advisory is provided, users should monitor Tibco's official channels for updates and consider restricting access to the administration console to trusted users only until a fix is available.